Sonatype CLM Server - Policy Management

11.3. Summary

At end of this section you should find yourself ready to go out and monitor policy for any application. Remember though, policy monitoring is not the only way to share results, and you should think about which applications, and which policies should be monitored.

Sonatype CLM already provides a number of ways to be notified and informed when a component in one of your applications violates a policy. While you could go and mimic this using the policy monitoring feature, the better practice is to use the policy monitoring notification for only those policies and applications that pose the greatest potential risk. In this, we stress, there’s likely nothing worse than getting an email at 3 AM in the morning telling you that a component used by your company’s intranet is now violating your architecture age policy. While that’s important information, it’s not 3 AM - important information.